Change wazuh manager ip address in wazuh agent

[Daniel Vidaurri]

Hi, there is a script o another way to change the wazuh agent ip address in several workstations?

I'm using an all-in-one configuration with 192.168.0.1 ip address and now my ip will change to another segment, with the ip 10.200.2.1, my 5 wazuh agents points to the 192.168.0.1 ip address, but I don't want to uninstall the agent and install again in all my workstations.

I will use a software to run the scripts to change all the configurations needed.

Thanks

[Santiago David Vendramini]

Hi! Thanks for using Wazuh! 

You can change the Wazuh manager IP on the agent in the ossec.conf file. Here is the documentation to do it: https://documentation.wazuh.com/current/user-manual/agent-enrollment/via-agent-configuration/index.html

For example, if you have a Linux agent (https://documentation.wazuh.com/current/user-manual/agent-enrollment/via-agent-configuration/linux-endpoint.html), you need to edit /var/ossec/etc/ossec.conf
 and make the following changes with your own IP address or DNS name:

<client>
   <server>
      <address>MANAGER_IP</address>
      ...
   </server>
 </client>

Then reload the deamon with: systemctl restart wazuh-agent .

I hope this solves your need.
Let me know if you need anything else,
Regards.

[Yugandhar M.]

Hello, We have similar setup and deployed Wazuh agent in nearly 100+ servers through Manage Engine Desktop central and configured the server IP address in all the agents. Now we wants to migrate to new server and could you please provide any scripts to change the IP address. This time we will use the DNS name instead of IP address.

Thanks,

Yugandhar.